Description
The web interface for Crystal Reports allows remote attackers to cause a denial of service (disk exhaustion) by repeatedly requesting reports without retrieving the associated image files, which are not cleared from the image file folder.
References
- 20040502 Crystal Reports Vulnerabilities mailing-list
- 20040608 Vulnerability: Arbitrary File Access & DoS in Crystal Reports mailing-list
- crystalreports-dos(16046) vdb-entry